Senior Systems Engineer

Endpoint Management:

• Own the end-to-end Jamf Pro environment—enrollment workflows, configuration profiles, patch management, App Catalog, Self Service, and macOS compliance baselines.
• Manage and mature Microsoft Intune for the Windows fleet: device enrollment, compliance policies, application deployment, and conditional access integration.
• Design and enforce endpoint compliance frameworks (CIS benchmarks, encryption, OS patching) across macOS and Windows.

Endpoint & Network Security:

• Drive endpoint security posture: disk encryption enforcement, firewall policies, secure boot configurations, and application allowlisting/blocklisting.
• Contribute to Zero Trust network architecture: VPN management and migration strategy, DNS security (DNS filtering, DoH/DoT), and secure remote access.
• Hands-on experience with Network Security tools like Palo Alto Prisma, Twingate, Cloudflare, etc.

Cloud Infrastructure & Access Governance:

• Assist in cloud infrastructure operations across AWS/GCP, including IAM policy reviews, SSO integrations, and access governance.
• Support the design and implementation of Zero Trust access controls for production and customer cloud environments.
• Partner with IT and security to ensure MDM-to-IdP integration is robust, enabling device trust as a factor in conditional access policies.